* posting auth code to db and returning response